CLAIMS : 

1. A method of supervising a failure of a system 
using a timer, comprising the steps of: 

(a) activating said timer and determining 
whether said timer is reset or not; 

(b) counting down said timer if not reset; 

(c) determining whether said timer has gone 
time out at a predetermined time; 

(d) generating a signal for recovery from the 
failure in the case where said timer has gone time out; 
and 

(e) repetitively executing said steps (a) to 
(d) for the next timer in the case where the failure 
cannot be recovered from. 

2. A failure supervising method according to 
Claim 1, wherein in accordance with the signal 
generated in step (d) , the step of setting a flag, the 
step of output ting an interrupt signal , the step of 
outputting a non-maskable interrupt and the step of 
outputting a system reset signal are sequentially 
executed, thereby recovering from the failure in 
accordance with the degree of the failure progressively 
each time said step ( e ) is executed . 

3. A failure supervising method according to 
Claim 1, wherein a plurality of conditions are set for 
resetting said timer, and the timer reset operation and 
the corresponding one of said conditions are combined 
each time said step ( e ) is executed . 
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4. A failure supervising method according to 
Claim 1, wherein the step executed in accordance with 
said signal generated in said step (d) is recorded. 

5. An apparatus for supervising a failure of a 
system using a timer, comprising: 

(a) means for activating said timer and 
determining whether said timer is reset or not; 

(b) means for counting down said timer if not 

reset; 

(c) means for determining whether said timer 
has gone time out at a predetermined time; 

(d) means for generating a signal for 
recovery from the failure in the case where said timer 
has gone time out; and 

(e) means for repetitively activating said 
means (a) to (d) for the next timer in the case where 
the failure cannot be recovered from. 

6 . A failure supervising apparatus according to 
Claim 5 , 

wherein in accordance with the signal 
generated from said signal generating means, the step 
of setting a flag, the step of outputting an interrupt 
signal, the step of outputting a non-maskable interrupt 
and the step of outputting a system reset signal are 
sequentially executed, thereby recovering from the 
failure in accordance with the degree of the failure 
each time said repetitively activating means (e) is 
activated. 
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7. 



A failure supervising apparatus according to 



Claim 5, 

wherein a plurality of conditions are set for 
resetting said timer, and the timer reset operation and 
the corresponding one of said conditions are combined 
each time said repetitively activating means is 
activated. 

8. A failure supervising apparatus according to 
Claim 5 , 

wherein said signal generating means includes 
means for recording the step executed in accordance 
with said generated signal. 

9. A method of supervising a failure of a system 
using a timer, comprising the steps of: 

(a) counting down said timer in the case 
where the activated timer is not reset; 

(b) executing the steps for recovering from 
the failure in the case where said timer goes out at a 
predetermined time; and 



recover from the failure, repeatedly executing the 
steps (a) and (b) for the next timer thereby to recover 
from the failure in accordance with the degree of the 
failure progressively in each stage. 



(c) in the case where said system fails to 



